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ECCIStiEM (ECC-CA) 4 4 tiECCf i&r;i/d'J XAiCf ofc^ 

[0 0 4 9] 

RSA&ECCliM (RSA&ECC-RA) 4 5 it, ^^.y F^y^-Jr 

XAi:ECCf^7M'J XAIC^of: 2 o <DfgHM^& £tf #[J L £4* Hi! MEW 
SfcRSAfgfiEM (RSA-CA) 4 3 £ ££>*E CC§g§EM (ECC-CA) 4 

[0 0 5 0] 

rcaMHI, Frc>^>r ffcfc*., RSAf^^4 1, ECCf 

2©#*te, RSA&ECC1#M (RSA&ECC-RA) 4 5^fi 

xwfin nfc r s Afi&r;i/ 3 u xa £ e c cfi&7;i/ =r u xa ic^o £ 2 ^ © 
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RSAf;H^4 1 tECCf;H^4 2 ilCD^tt, ^Hg^flf ^iSlCtEo 
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*mwxmm^m& / Afflmmmm(D'mMizrD^xnw-?z>o temmummit. 
ikffimitm^f-m^T 1 - * (Dm&m. &z^izT-*m$:mzfi&o2mmx(D 
ftiLMum&ximiz&^x, mm-t &&mmtfiEmmqm%<D%-tz>teffimx& 
5 3t$:fHf, Ttefr-ztemmuwm&mnmt: hxnuum (cAicertif 

icate Authority) i$Wffl LfL%)<DX&£> 0 tt%m<D Z/*T l±X®.m £ 4x5^09 

mm<n-7it-*?v hw\t* 4kMmummy*-w hx. 509 V3ic$ii 

[0 0 5 5] 

A-^'a> (version) & % IE0J!#7 * - V y h CD A- 3 > £*t-r o 
i/VTfr-t->A (Serial Number) fgllM (CA) IZ J: oTf83£$*lS^ 

BSfttliEWSOS/y 7Jl/t>AT^5„ 
**7^/=ry XA88B'J-3\ 7^JUXA;t5^-* (Signature algorithm Id 

entifier algorithm parameter) ^^HIE^SO^i&r >J £: -£© A 
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ffi|«-S§- (ECC) , RSA&£#&U, Jff RffiM#^^iffl$t^TV^S^^i 

7N* ^ ;* - # £ <fc tf«hR#SB» 3 *u R S A tfStffi $ ti X v \ £ »-£lc ttigfitf IB* 

^ff# (issuer) ^g8«HW*CD»ff #, -rfcih^ME^ (CA) 0D£,|fr 
#SKS!I«rtBfcJg5£ (Distinguished Name) T?SB»3*lS "7 -f -;!/ 

(validity)«, |Elfl*©^»&RBT?&SI»*&BB?, **7BHfr#SS»S 

V V (subject) ft, 3.— if TS>«KIEjy-*#©i&|&*«8S»3 A 

"tr^^x? h£tBBfttft$i (subject Public Key Info algorithm subject Pub 1 
ic key) i-f it bT©i7;i/d 'J XA, HfiNg^ 

[0 0 5 6] 

3r 'Ammummy*--?? hx. 509 vnc^stis?^-^ 

Kt^y, J^Ttt, ^SIE^f7t-7yhX. 5 0 9 V 3 tcfc^TilflUS 

ti-s^^ FT?**- 

[0 0 5 7] 

U.BBM^ffl.M^' (authority Key Identifier-key Identifier, authority Ce 
rt Issuer, authority Cert Serial Number) ISIEM (CA) 0)^%MW1~? 

sflwe&y, mmm^ asmm) , gsnE^ (ca> «K#-^«:*tt 

if-^x? h«feffKW7- (subject key Identifier) it. ^Oi^^iilEi 
it^MSlft (key usage) ft, B^Srli^f S 7 4 ->l KT*& »J , ( 

o) f^^^nm (i) ^um±m. (2) *t©Bfip#ftM, .0) *>yiz 
-wmmtm. (4) ^ititfe^ffl, (5) ggKcz>*«mM9* (6) $c#y 

Mll^fflRR (private Key Usage Period) a-f©^f5Mi©fi 
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MUmtfVp- (certificate Policies) B\ fg§EM (CA) feJ:tfS»M ( 
RA) ©SEWS^tfsKU S/-&Sa»*r*o Miifl SO/IEC9 3 8 4 -UC 
lp«lfejK';S/-ID, SgSEXill-efeS. 

sKU 2^— • -?v\Zy9 (policy Mapping) ft, fgHEM (CA) £f§IiEir-£l§-£ 
K:©*gS»-rs7-f-;i/KT?*>»;, SEWSISff&ff&^saEM (CA) 2^ 

h • /^l/lfjXA (supported Algorithms) ? 4 hU (X. 5 

Wii'hM^ (subject Alt Name) l±, zl--^ 0>gQ£ SrSB^f -5 7 -T -/I/ 
mnmmZx (issuer Alt Name) J*, fE«Mff#®J9a« fciB^-f S 7 -f 
^r^V^9 h • UP hV ' 7 hV tfa.— h (subject Directory Attribut 

(basic Constraint) ft, ttEW*f*©^IW«^SIiE^ (CA) 
fF^-tf- 7* h U (name Constraints permitted Subtrees) ^fgfl 

m&mm (ca) ^»s»^^©*«ffls*i*iiEw*©^«rifi«s:^-r7-f- 

;i/ ft?*s. 

iW*&jKU2/- (policy Constraints) ft, |giiEAX<Z>$g U lZM~f £f0!5i&I8tE 
CRL#^aK-^> h (Certificate Revocation List Distribution Points) 

3.-- vtfummitmmt&m^ umm^^Lx^^^\ zofrzmu 
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m&i*. %&um (ca) (Dm&y* -ju kt'&s., 

[0 0 5 8] 
[0 0 5 9] 

±>*(Z)^BI«liE^©*i&tt, ^MfitiEW»»ffJ3 (CA) ©Mit£Mv>T 
^MiSif^^ (CA) ©^ggttSrfflv^T^SESrffJ&v^ <^gg^iE^ 
[0 0 6 0] 

«^£tf)y;bdfy XA&CoV>T, *?\ H7fcfflV*T*Rft**WF-»- (Ellipt 
ic Curve Cryptography (ECC) ) V>£*M(Co V^M^TS,, 0 7 IC^t 
f&aUi, EC-DSA ( (Elliptic Curve Digital Signature Algorithm) , 
IEEE P1363/D3) .SM^fet^r-f 04jSfta7n-"C*S. 
[0 0 6 1] 

H7©#^^y^ , lCov^T«B! , r*. *^y^S lJCfc^T, p&*», a % b 
MftMI (iRM:4a 3 +2 7b 2 ^0 (mod p )■ , G&iRi 
«S±©/^~X5K>r > K .rS:G©ffia, KsMi (0<Ks<r) ilf5„ 
^fy^S2^V>t, ;* yt-^M©A»y S/aHfetfllU f=Hash(M) i:-r-2>o 
[0 0 6 2] 

A^fc^fflf^SifctfltL^ /Ny S/aWRfCAi&Stifc^-*©!^ h*«3K 

oM^SA^-^Sr^Lm^-Zlii^Kil-efeS^Sr^-f So /vy.S/a.W«fc 
ITtt, M D 4 , MD 5, S H A - 1 ft WfcflS^^fc&S.U DES- 
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[0 0 6 3] 

^in, Xf'^S3t-, SL^u (0<u<r) ££j&U ^f^S4t^ 
-X/tf>f> t>£u^U£MtlV (Xv, Yv) SrffHE-rs. 

[0 0 64] 

mi] 

P=(Xa, Ya),Q=(Xb, Yb),R=(Xc,Yc)=P+Qi:t5t, 

p*Q<z)f§ (mm * 

Xc = a 2 -X a -Xb 

Y c = X X (X a -X c)- Y a 
X=(Y b — Y a)/(Xb-Xa) 
P=Q<Z)B$ (2ffiF#) , 
Xc4 2 -2Xa 

Y c = 1 X (X a -X c)- Y a 
*=(3 (X a) 2 + a)/(2 Y a) 

[0 0 6 5] 

Hmt.l>Tlk<D&5\Zft5 0 G, 2 XG, 4XG- • ^ftll, u £ BB L 
Tl;^32o T V'v-S £ 3. 5 IC $ffS "3" •£ 2 S XG (G & i EI 2 L fcffi (i«u0L 

sBa*e>«;ifcis©fcry h&B) ) itum-tZo 

[0 0 6 6] 

^f7^S 5t% c=Xvmod r fcff^U * °7 S 6 T? r<E>M# 0 {C 
ftS^if^WtU 0T*fctt*U£X5^:7S 7T*d = [ (f + cKs) /u] 
mod rHtlU Xf >y ^ S 8 T' d ^ 0 TfeS ^IJS L, d # 0 

tttltf, ^y^S 9 T* c £ <fc d & t?fi&f-^illttt}MS. «IC, r 

$: i 6 o bf 7 h«©s$T'^s t^tsi:, m^**-?-*^ 2 0 hfy hj| 
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[0 0 6 7] 

£MoT Little 
[0 0 6 8] 

7£{C, ECCIC J:S« : ?*i&CDtftffi#8s&, EI 8 £M V^Tfi^tS. ^fy^ 
S 1 IT*, M&jlyfe-S;, P&£S8t, a, b&ffipm (ftHftjlg : y 2 = 
x 3 + a x + b) , GfcffRffiifegJ:©^-;*^ y K r£Gtf>&$(, Gfeit^K 
sXG&« (0<Ks<r) Xf^S 1 2 ti^f-^ 

J:tfd#0<c< r, 0.<d<r SrSlfe-f^lftlE-r*. dftfciRfc UT V^»-& 
, ^f'y^S13t', ;* ylJ-5?M©/\y S/afB&fWU f=Hash (M) 
il-t^o #UC ^fv^S 1 4T*h=l/d mod r£ffJ*U X^V^S 1 5 T? h 1 
= fh mod r, h2 = ch mod r 5:ft^t^"So 
[0 0 6 9] 

X^y^S 1 6lCfc^T, mztmVfeh 1 £J;tfh 2 £«V\ j& P = (Xp 
, Yp)=hlXG+h2-Ks XG&fUff 3„ @^£^$E#li, ^MUG 

o^*9--f&©tf#3S«-e^s. fit, x-ry ^"s i 7 t?j&p 3 

Jfett^Vy^S 1 6T*T*£TL£e>= o£ U, P= (X, Y) , Q= (X, -Y 

) (Dtianzftsn. ^trnt-tf, p + Q#&is£/&T&s££#iH9!UTv* 

5). Xf^S18T'Xp mod r^ltfb, t^-f i&f-f c 
[0 0 7 0] 
[0 0 7 1 ] 

Xf77°Sl 2t:^^t, i?fi&f-^c*fciid^ 0<c<r, 0<d 
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<r fe*|fcSJ&*»ofc»-&, X-r-y^S 2 OlCiit?. .* fc, Xf y 7 S 1 7 fc£ 

^^"S 1 8 tCfc^T, Xp mod r ©Mtf, t?f i&f-^ c il-tlt^^ 
frofeft^tCfcX^V^S 2 OlCjttf* 
[0 0 7 2] 

[0 0 7 3] 

tfCtC, RSAHff#^C!>*i&T;i/=JUXAS:H9 f 0 1 0 £M V^U*^ £„ 

HI 0l*'(a) #££JiMaSL (b) **tt«E«a&'a%LTV^S. 
[0 0 7 4] 

££p, q (i 5 omnm.) zmirl cs 2 d , n = P q & tract/ (s 2 2) , 

3£iC, L= (p - 1) (q- 1) SrffHtL/ (S 2 3) , L k.MMHSWL&f&fc.te 
VMi*«f©iE«SE«e (n, e) (S24) , d e = 1 

mod L S:»J£-r*iE3eESS[d (p, q, d) S: ft® «t h * (S 2 5 

) o 

[0 0 7 5] 

T^ft)tl^<, EI 10 (a) JC^"r#*5fefilttt, Xttv^S 3 1 JCfe^T, #i&*f 

vfe-S?MtC>tf ITA^ 's/aiajRh &lfflLTm= h (M) 
> $ £IC, S = m d mo d n££j£ (S 3 2) IT> S £S:£h-r3o 
[0 0 7 6] 

010 (b) JC^f*^fettiEtt, m%ftlUttm£.teZ>* yt-yMtC^btA 
*r>aR»h«:aMlTm=h (M) ^ (S3 3) U $ tC, m=S e m 
od ntf&&-? &fr&fr&mt (S 3 4) IT, W£r#lEL 
V* (S 3 5) tfKttS. 



2 3 



ffi|2# 2001-3107894 



#2001—002221 



[0 0 7 7] 

«?« & ®m •* z>mt>m*m& & &m b r=. z t # t> & & . 

[0 0 7 8] 

XtV?S 3 4 &C£^T, m=S e mod n #J&3£ b&VN £ *l£|§ltr 
, 3 6££V*T»£#IH*oTV%*i:flje3*l, -5 s - # tt*3SS tit 

[0 0 7 9] 

m*m&Tfr3v X2*x* tf&mT'&v. -mwz&mm (ra) cdui 

[0 0 8 0] 

<t e> (c^RiiecE9!*». a£#^-*^e>fc*as#«« (vn«) ei, mm? 

-Zfrbte&mmM® (V3I«) 6 2^„ (VI 
««c) 6 1, jftSgfif^ (V3««) 6 2£#}C«o-VNT»£;ft£-?-#£*yi? 
-^'i:lT, iiu&©*fF3ffi;fe|E®^ (ECC) , feS^ttRSAfM^if 

»c«*«« (v l M«) 6 l ®'*£fliaHK«c 6 4 {c|H^$ ns. 

[0 0 8 1 ] 

t- 0 *r, -hi 2<Dmmz-Dwxmm-tz>o mi 2<D4kwmummi*. m&tm 
m (V3i«) 7 2$:^o 0 m%m®A, 7 3ii, mi Konirtiira*©*^ 
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&u> (vm«) 7 1, mmm (V3M®) i 2±mzm^^xm 

i^ftS-?-*** vt-^tbT, SrfizECDffi Rffl^Pt-^- (ECC) , &£W£R 
S A ^£ * if © 7 ;i/ If U X A £ jgM L T $ ft W£ & teM 1" -5 

. *£««a, 7 3 tc««i3ft«s#i&»cB8'rsai&^r;i/=ryxA, 

*jfcif©tl*tt,- (Vll«) 7 i©#4itt*|g«7 4K:|B»$ftS. 
[0 0 8 2] 

S&tC, *£ffi«B, 7 5tt, »£1£«A, 7 3tC«j»Sft**i&i:l±MJ&* 
i^Til/^'JXA&lfflLt, (VliK) 7 1, f£3B*Iigc (V3«« 

) 7 2£ft(C^t5VNTf#e>ft37-*-# y-fe-^fc lt4l«Sftfc*i&t»S 
o *£««B, 7 5 (V3M) 7 2JC«*»iftT*ttSftS. M 

*l«§g«c (V 3I«) 7 2£>-9-y^x* N-f^l/^h>J -Th'J tfzL- h 
(subject Directory Attribute) ftC&MRT1}BT*&£ 0 & £ V 1 * Ji^CDffiCZ) 7 -f 

[0 0 8 3] 

s^ic (V3i«) 7 2icit mastom* (**«*A f iznm 

**4f©fll*««*i&«««*7 7JC|B»Sft*. 7 7 tt, Mi« 

5S«c (V31«) 7 2(Z)-9-^i/'x^ h •f^Vi'hy -7 h.U tfa- h (subj 
ect Directory Attribute) WtC^^-TS Zl t^t'tS. & -5 m£-?-<£>flfi<Z> 7 

[0 0 8 4] 

7 7^ti76(t mxify^v= i<Dt.gizte, mzmmB, isizm&m 

«A, 7 3 M&l»£ft<5#i&i:«:MfcS*£7;i/=rU XA&StfBLT^jSSftfc 
*£#«*l*;*ftTv*S£i:&a*U 7<7?=0.<D£.%\z\$ > m&M®B, 7 5t; 
^f£r 3 ft T ^ & n » £ £ ^ -T o 

[0 0 8 5] 
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^£«cB, 7 5 ©f E C C 7;V ^ 'J X ACt o fef i& h 5. 
[0 0 8 6] 

Hi2<D«tit mmmm (V3g«) 7 2ic^&m^a, 730**7^^ 

UXA^M^^T;i/d ri ;XA{CJ:-5l|2(Z)^S: 1 o*&g»Lfc0!I£^bTV*5# 
, 3e>JCM*iST^/=fUXA, &SV^±H*:S«t^ A 5- ;* - * fciifl! ht~m& 
ZZil&LXmmm (V3I« 7 2fc««©*£&»iWl,'t%J:V*. 3 
ti, «it«7^^S:2 tfy h#|f&£ ITO 0 SB2©*i&fcU 0 1© 

I2©f*»»j, 10©m fg3©^;&%&£^ HflR©***** 

**isits:a»a«fiB«i**fc'r*. a 7 nz-D^x^m? 

[0 0 8 7] 

, *£1K«A, 7 3 0i^ECC7;i/i'JXAi:tofefi&T'fe'J, 

f*fi«B, 7 5 0f R S A7;V J U XAIC^o fcf i& tS>5i^ ECC 
7;t>=fU XAC<kS&I£<Z>*#"6rtB&:i::y Ki>f>ff>f (EE) ©tVW*!* 
. **I«A, 7 3©#i&<ftSES:Hff L, R S AT;HfU XAtCJ: S^SEtf)## 
"T|g^X> Kl>fYf>f (EE) ©^A-f^li, Wi&fl^B, 7 5©*£fcSE 
£ H^-r Sit # ortB £ & y , ECC ttA4 ^tRSAf/UXi:® ia©ffi2fK 

[0 0 8 8] 

mz, 0i3 0M{:ovMi^ts o s 1 3 (Dtemmummi*. mutmrn 

, I*f-f^?)«;5S*«i (v.ifg«) 8 1, ifc^-^&'fc 
(V3I«) 8 2^„ *£«)cA, 8 3te, EI 1 2 

y, (vn«) s i, mmmm (vat*) 8 2±mzm-3^xm*> 

ftZr-Z v^-Vh IT, iia^©#Fgffii&lBir# (ECC) , &£vn&RS 
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[0 0 8 9] 

f^r;i/jyxAeiu, (vi««) si, mmmrn (vs«« 

) 8 2£ffrtcS^Tf#'b;ri.5"x I -# y-fe-^fc OT4«8nfe#*T**« 
. 013©#^T?li, #£«&B, 8 5t«5gTO (V3I«) <Z>*MCte*ftS4X 
5 D (V3fi«) 8 2JCWU itS<Z>W£ A, 8 3 0^) £ 

M^ST;HfUXAlC«fcS^*^*tlS^^S:^i-7^^«#8 6fc, ^ 

[0 0 9 0] 

H13©flnftH12i:H«, **flg«.A, 8 3«Df*7^JUXZ»i: 
[0 0 9 1 ] 

Atc«fcStfeSE©*^BrtB*x> Kx>f>ff^ (EE) <£>^VW**BSI13-e, » 

^lEfc^f-rsr t^oriBh^ y, EccfA-f^tRSAf/H^t'cDia© 

[0 0 9 2] 

temmmmmf. mz^mmmiz-D^xmrn? rrtit si 2 

[0 0 9 3] 
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[0094]. 

mm<Dftfim#*mm (saon -r*. (ra> rsai* 

Lfe^lWilliEW^^Si^feSW^WSa^W (RSA&ECC-RA) T?& 
[0 0 9 5] 

&&J@ (RSA&ECC-RA) *^BI«tffl£W*©»fTS*SS'(3'r«i:, 2§ 

ic-fey hts*2&7^^yxA (i©i^(iRSA^n) jc^-r^siEM ( 

RSA-CA) lC|E^tfflMM^S:Jif (S 3 0 2) t«. *7D-0 
iff l©fi&5:RSAi:U $2©**S:ECC7^dryXAIC 

[0 0 9 6] 

aMmfr*&mmmmm<Dftftm**3tm\s&&mm (rsa-ca) a, & 

XAt It R S ATJVziV XA, £ J:-tfA9* - # £12 v hf-S. $<=>tc, fg$E 
M (RSA-CA) tt, fi&©^©#i&$:^fft-*SSEM (ECC-CA) JC& 
J&Lfc^gtIE0J!#S:i2Hi (S 3 0 3) t5. 
[0 0 9 7] 

sssem (rsa-ca) frb&fflmmwmy : -*z i gmLf=.MU.m (ecc- 
ca) tt, &mmmmm<D&misfc&mmmmm<Dmmtom<DV7s?x : 9 h • ? 

J UP hV • 7hD kfn— h (subject Directory Attribute) ftlClfi&y 
UXAtlTECCTA/J'JXA, ■&&Tfrt^*-*&m&mmHLX1zy M 
, ££>IC, 3fS2(Z)^£##:&f S3h£^:7^£-fey h (S 3 0 4) iT£ 0 
fcfc, #*W«tt-9-^^x^ h • ?4 h U • y V U tfa- h (subject Dire 
ctory Attribute^© 7 F©^- * RTtg&fl^lC^ U T =fe <fc Vn„ 
[0 0 9 8] 

#uc, umm (ecc-ca) ^wnanE*©^-* (*vfe-s?) icg 
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Mx.&mmm®<Z>-9-7i?*? h • ^4 h U • T h U e'n- h (subject Dire 
ctory Attribute) IC&M-t-So ft»«««f7t5i:, ISM (ECC 

-ca) it. &mmmmwzmmm (rsa-ca) izmm (s 3 0 5) ts, 

[0 0 9 9] 

IgfiEM (ECC-CA) ^^^HHWEqi^-^feSfllLfeBtEja (RSA- 
CA) fcfc, &0MIIEIJ!#©«5 2 - * (*>1z-5>) iCio'^TRSAT^UXA 

MfCSHfs (S 3 0 6) tS. 
[0 10 0]' 

S»^t±, 5f«bfe^WlitaEW»S: 7 s /WXCSHB (S 3 0 7) U ^A-fX 
ttS«Ufe45iBB«Sj5EW*S:8B«#mJC*» (S 3 0 8) i-§ 0 
[0101] 

[0 10 2] 

^^lEB^CD^fS^^VWXtt, (RA) lC*fLT^I««aE 

W*0«fTS#&aiM (S 3 5 1) tS. fcfc, (RA) RSAfi& 

Lfe^MltfE.W»©»fTK^«:SW#W*«l»JS (RSA&ECC-RA) 

So 

[0103] 

&mm (RSA&ECC-RA) ^HaEB^O^TH^Sr^M-rSi:, 

(rsa-ca) izumm&mrm&z&m (s 3 5 2) -rs 0 *7d- 

[0104] 
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m&mfrb&mmmmmnmm&z&mLfcmum crsa-ca) & 

XA^LTRS AT;i/=fUXA, & J; *>V\°^ ;* - # £-fe y f> "T So 3«o{C, fg§E 
M (RSA-CA) fiiS©;^(D^££^TirSl^M (ECC-CA) JC£ 
^b£^gtM»£^m (S 3 5 3) iTS, 
[0 10 5] 

issem (rsa-ca) frib&mmumm'r-zit&mLtc.num (ecc- 

CA) ttu h - -T-* 

-f • 7h'J t*a— h (subject Directory Attribute) p^{C^^T;H3V 

U X A i: b T E C C 7 ;i/ ^ U X A, 33 J: A ^ * - # 5: # £ L TiZ y h b 
, $^(C, ^2©fM#fitS3t^t77^5:t7h (S 3 5 4) f5„ 

mZmmZ-y-yp^V h • ^-f b# h U * 7 h U l^a- h (subject Dire 
ctory Attribute^© 7 ^ K©^*- # &M^fg&Mc&C;|gM b T =fe J: 
[0106] 

mm (ecc-ca) &mmmMma>T-$ (tviz-m cs 

(ECC-CA) fcfc, 45iW^SE^^S:|g|EM (RSA-CA) {Cj£# (S 3 5 5 
) t5. 

[0 10 7] 

Mum (ECC-CA) ^e>^BB«SEW*7 s -* i feS#bfeStiE^ (RSA- 
MtCigfg (S 3 5 6) t5. 
[0 10 8] 

se^tt, 5e«bfc&w»MEW»&fvt>f;*K&« (S357) u f/t^^ 

tt£tebfc&l»ttiEW*&iB«#©K:«i» (S 3 5 8) 
[0109] 
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xj*K&vfcm&z&&LXti t m+&z£.%*im'v*>v. 3-f§i£M (xx 
x-ca) ^#cAjc^jE5-r«#ifer^druxA (xxx) xm^^mnvxm 

[0 110] 

§r £ y, e cc&£w±r s A©#tf>M&£7;i/rry XA#t3#nrfB& 2 

[0 111] 

r s A#£7;i/=ry XAcD^cD^s^^rtg^^A-rx, Eccf^r;i/Jyx 

[0 112] 

SrfQfflU X#R S A^fcliE C C#j£& 1 o©7Jl/^'JXA0| 

&<D&mm^m&TAj *x*&2> £.%<Dm£feu#mw*:m 1 6,01 

[0113] 

^"S 4 0 1 tCfc^T, f^H^tt, M;U£fflS3g3E*L3I&2SfTl/ J: ^ £ 
^ (Signature algorithm Identifier) y J — }V KOD^- # \Z.^~3\^X^%x~T )\s 

=ry XA$:5tfgu, (U^A-f ^uc^t^ji (^n) "rtBa^frfcME (S4 0 

2) f5 0 
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[0114] 

T, S*M^C©^ifeT;i/dfU>CA^S(l^ (Signature algorithm Identifier) V 

S 4 0 4 OMmZMfitZa 7,TV~7S 4 0 4 (D$m\t. mi 7 <DWM7 U-\Z 
[0 115] 

SHI^f (Signature algorithm Identifier) y j — Jl Ktf>-r- # \Z^-5 V^T^^&T 

o 2) -rs. 

[0 116] 

T, **MJ|5c©^T;i/=fU XUmm^- (Signature algorithm Identifier) y 

s 5 0 4icfevxx, mom^^z^^m^ (n2<Dm&) tf&fflznT^&fr 

[0 117] 

y^?tf&2<7)m&(D^Z7jk^T^&^m& (ex. 7^7=0) it. 
ZfeUtZZHtfT'gT^- (S 5 0 7) 
[0 118] 

7^y#fg2©Jf^<D&$ft£^LT^£^ (ex. 7^*=1) li, 
l!2cD^tcM^S^M&^ML^M^^fi£^i|ic©^^^x^ h -r>f U 
n'J • 7 h U tfa.- h (subject Directory Attribute) <D?-% £#BMU 

r^yxAtfef/u^ -era «rfg & 7 ;i/ =r u x a t* & s a^a* & vss ( 
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S 5 0 5) gf/u xiz&^xmm (jfttE) *smx$>z>m&\** 

s 5 0 6c^t, mmmmw^iJai? > • ^ i^^ n u • r s u t^- h ( 

subject Directory Attribute) 7 j -Jl KiCfH^^ tl^^i&^^tC^o ^^liE 
[0 119] 

x^y^s 5 o 5{cfe^§^2©^(cMi-§^##(Z)^'r^r;i/ 

^2<Z>^£rfif#£:|Bj«t fi£5SMiUc©-9-^^x^ h • l/^ hU • ThU^rL- 
h (subject Directory Attribute) 7 J -JV K^<2«C £#flg btHft§ 

o 

[0120] 

5 0 4 <D 7 ^VmWikU. ^f^S 5 0 5 (DM^UO) vS^Vife ZMft b 
[0121] 

ura* ^ft i tcMisit. &m z ntz.m&<D^ifM^ n f/u * tc & ^ x®. 

Tf 45tBB«taE W#©iE ^ffi "T £ r £ #T- £ £ „' 
[0122] 

El 13 0M t-J&fc^^^itlE^a:©*^^, t£M«Jg(^a>1H« 
K4>fc< 2^^»§*l, S£lCfg3, •••<^^# ; teM£*lfclir 
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^mmmm^mi 8, mi Q^myu-iz^xmm-t^. 

[0123] 

?zmmm^fr%mmm%tfi* / Afflmmwm (mizmm) ^sot-So &mm 

(Signature algorithm Identifier) y 4 — )l Ktf)-r — # \^X%k%xT )\> 

=tuxa$:si^l, s^am xk^t^ji (&ii) ^sm^^^u (S6 0 

2) fSo 

[0124] 

g^A-f XfCfeVNT^S (^HE) oTIgT'&^^-^li, Xf7^S 6 0 3(;fc^ 
T, M^M^COM^tT^^ V XA|^g!KP (Signature algorithm Identifier) 7 

^ft--5o g-rVW^tCfcV^MI (^$E) RltgT*& v^lirte, Xfy^ 

S 6 0 4 ©gtig^fT't-So X-T^y^S 6 0 4 ©#L3l&. EI 1 9 IZm'tf&M'? U 
-K<££ftZ>Mm£.mMT*$>Z><DT*. El 9 fCf£o TlftHJ!^ S„ 
[0 12 5] 

E'J^- (Signature algorithm Identifier) 7 4 -Jl F©^- # ICS^S VNT^i&T 
;vi'J^A§:5liU B^A*>f XfCfcV^MI (&fl) ^rtg*^7!)^^$E (S7 
0 2) 1-£ 0 

[0 12 6] 

ftj^vwxicfcv^Mi (^ii) *smt* Ts^-v rfs i o 3 icasv^ 

T> S*M©f i&7;i/^ 'J XAIg'J? (Signature algorithm Identifier) 7 

w -;i/K{cia^$ti^«^^^;{c^o^^iiEr;i/=fux^$:jiMLT^^iiE$: 
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[0 1 2.7] 

y5y*m2<nm&<D&wi*:7jkLT^te^m& (ex. y^y=o) it. m& 

Z&U-tZ>Z.lltfT°g?^^- (S 7 0 7) HteZ> a 
[0128] 

7^ytfm2<Dm&<Dfem*7XhT\<^m'£ (ex. 7:7**= 1) it, 
^ h U • 7 h U tfa.— h (subject Directory Attribute) ©r-^ l:#^L/, 

^£ r ;i/ =r u x a & a t*a >f x v mm «rtB & t jv rf v x a 5 j^jfr %«f8 ( 
S 7 0 5) ts. s-tVw *tcj3v^«&Ji (&se) RrtgT? xryzf 

S 7 0 6^C^V^T, *fc»1B«^©*i&7-r-^K (IS 2 0)^2, 7 - 

h U If A— h (subject Directory Attribute) 7 -f RCfE$i£ ntc^&JS 
[0129] 

h (subject Directory Attribute) 7-f FWIi^tlltf^T^J 
[0 13 0] 

^S7 o 4oy^^mmmu< TsT-VZfS 1 o 5<DS£4&iEtf>«TS¥!l5g£Jlfirb 
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[0131] 
[0 13 2] 

H2 0{C^3V%T. RSAfA>f7 5 0 1 teRS A^&T;i>rf y XA0)#t3i (IfctE 
) tf^^fg&^A-f *T*& ECCfAM^5 0 2iiECCfi&7;^'JX 
A (DM (JfcSE) #£*T RTffifc-r/W XT**. 
[0133] 

RSAfgiiE^ (RSA-CA) 5 0 3 IZR S A#i&T^/=ry XAfC^o fcfSII 
T?*»J, ECCSS^ (ECC-CA) 5 0 4 liE CCSi&r;Hfy XAtCfigo 

[0134] 

RSA&EC (R SA&ECC — RA) 5 0 5(t #X> Kx>f-f 

y xa t e c c 3 y x a icse o 2 o ©$8$ejs*£ * tf #n b fe^BBHiE 

(012, ®1 3 #8g) £ R S AfgiiE^ (RSA-CA) 5 0 3£J:tfEC 
C^II (ECC-CA) 5 0 4MLTMU #;r> Kx>f^ -r^f fC}£ 

[0135] 

«k e>&^#£fC;}3^T> S2 0tC^"T#X> Fx>f^f^ R 
SAf/U^5 0 1, ECCf^^ 5 0 2(Z)#^{t RSA&ECCg^ ( 
RSA&ECC-RA).5 0 5 j&ffl T?|8fT £ R S A^£,T;i/ =T y £ E C 
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o 

[0 13 6] 

RSAf/HX5 0 1 fcECCfA>f^ 5 0 2 tOMJjlZ. 4fclH§ttHgF##5£lC 
[0 13 7] 

& R S Am% *m U ffi LT R S A^i&r ;b=3* U XAfcfto fctfeSM&SI ( 
H10#flS) fe**fU E C Cf/M ^5 0 2 l±, M^^MiEif * 

[0 13 8] 

RSASi&T^'JXA, E C Ci^TJI/^ U XAM©^ 3 0f^7 

2 0 £|^##^V\M*P^T'<DraSf§fl7bWtg£&£o 
[0139] 

C*»©»*^s;a-^/«:»oBliE« (CA) ] 

±&<Dmmmizi3^x, uuma. rs A&5v>&Ecc&£&t— <z>^&y.;i/ 
m<Dm&T)i3vx2*Kfe^xm&z^mt:Lt^mmmmc.'D^x& > T. m>w 

[0 14 0] 

w&<Dm&*v*-fr*wrzttmmu}i\sX<Dnum (ca) «^^cov^ 
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ttO-fe^a 'Jf^f ©flt«ttSIiEM(C A : Certificate Authority) & 41^^16 
[0141] 

- K"?i7(HSM : Hardware Security Module) o Z\ 

nfff Mm tt mm x* $> & . 

[0 14 2] 

*njfeMcDS/^^Atc^v%Ttt> isii^ (ca) mmomftzmzitt. 

**»©*i& i es;a-^S:*'r*tt|E» (CA) ^$rH^-r^ 0 
[0 14 3] 

12 1 JCtB»©*i&^s;a-;i/S:«po«^3gliESIiBi: LX(DUUm (CA) © 
ra?:m0^^-5>05:^"ro (CA) 7 0 O0CAU-A7O lit &mm 

«aE^*«ff?t#«lx> Kx>r^r^f (EE : End Entity) *^©>ftgg«3E^* 
38frI££&*8l*fc£«US (RA : Registration Authority) 7 5 1—7 5 5 

[0144] 

#fi»S (RA) 7 5 1~7 5 5lt gB0fit5i>Kx>f>ff^ (E 

e) jcMur»fT^-s4iBi«SEW*Jc*r'ts*ifer;i/druxA, Mx.it rsa 

(Rivest-Shamir-Adleman) mf-^iS, Wiffi RMP|p# (ECC:Ellipti 
c Curve Cryptography) fc£&tfMrrs#i&2f^fc btllLT^ V . MMZtl 

me>mm&zmum7 o oizttLTnfi-r&o (ra) 751-75 
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5«, ia<of«tsx>Kx>f-rf^ (ee) jc*wT.»aHrtB, -t&t>% 

Zm-R-tZZtiZft*). &&mm (RA) 7 5 1~7 5 5iif:#It6**7 
[0 14 5] 

temmumw<Dmnmmz. uum (ca) 7oo©cAt-A7on:<j;o 

TSWf»fe>*l, CAt-^©ft«4S»S (RA) 7 5 1~7 5 5 tHSi& 
r;i/=TUXA©TOS:^lS#t , tfe , T— ^tCt^oT, ^^^3.-^7 0 2 a~ 
7 0 2 n38«3BiRStl, ^£*l£^£^zi--;WC£j-£ L&&imSEtt*&3Hi 

[0 14 6] 

^-JUZ£~DXmft vSmtem&TJl^V (ex. RSA, ECC) [Clot 
»£*M«:3SfTU ***«llf?S*lfc^BB»aEW*=S:CAi?— /t4 1 JCjEjg-TS 
. CAt-;t7 0 1li, ^^a-^/tCfeV^TSifeCDJ&Stlfe^lWtttiEWafS:* 
^^-;i/^^MbT^T^£ffiLfc3£#M (RA) 7 5 1-7 5 5 iC*£# 

[0 14 7] 

Si&^E^n-;!/? 02a~7 0 2 n<8#*li, S£ £H?T 5 fctb<Dm&Tn> 
=T U X A JC*£ o fc»SEJS©*i&tt ^AijLT tefflf 5 ^ * tt S £ ^ 
L, ^©Si&a&fcJB^T^fc&ISfTi-S. 0 2 a~7 0 2 n(0 

Sife^frffiO^M^- h*fx7(HSM: Hardware Security Module), 

-)V7 0 2 a~7 0 2 n l$W* > /*-tt CAt-;t7 0 1 

L fe^gB»SEW*©*^il3RtcS^< ^ y -fe - VizM ITf^iC <fc zmzmm 
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[0 14 8] 

m^V^-^l 0 2 a~7 0 2 n©#*(0HtT^SS4&fll3S<Z>#lIfc W 
izSLfcRSA (Rivest-Shamir-Adleman) Sg^^ ffRffiifcS (ECC:Ellipti 
c Curve Cryptography) ^S?* ^^S^SS (D S S : Digital Signat 

ure Standard) £ £ #^lCfeV>TJ8M-rs«t«K:«l: »j, MB 

£*jtf)£LT, RSABff : 5 1 2 b i t, 1 0 2 4 b i t , 2 0 4 8 bit, 
*IRffi^Bt# (ECC) ^-ett, 160 bit, 192bit, 224 
b i tff&Z. *Rffitt»«#{Ct3VATtt, #F(p) (pteftI$t££«2cD^£ 

HI) ±©«rcM5y 2 = x 3 +ax+bC^T, ffc(Z>««[P, fi« r, a, b, MLt©^ 

[0149] 

z: © j: e> (c«ft r )\y =f u x a & «rtB bsem feirttsmcj:'; 

[0 15 0] 

B1EJS (GA) ©»ffLfe^BI«liEW»©f!lffl^#-e»«x> Ki>f 

(ee) <z>^A>f* cmmmmmm.) iz&^x. mma>m&T*3vx2± 

[0151] 

H2 2W:, l>Kx>f>ff-f (EE) ©fA>f^i^©^D y ^|2IT'$>S 0 

E12 2ic^-r <fce>tc tVwxw:, fa^A-f x, 3>f>^^n;w^ 
v^agflu© (ra) ^t^mm^mn-t^mmms 3 1, tW;*^©-?-* 

**e»#iaan*AA#«8 3 3, crt, lcd4m^is8 3 4, 



4 0 
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m-t&^mmm 8 3 6 zm-tz. 

[0 15 2] 

Ht#^SgP8 1 Oli, lt^MS£#:£M^£MgP8 1 1, *rM 

(ID). «»0^©j»«6f«t«!if©ffif«S:«lft-r SfB'[fi^n.-;b8 1 2, 
fflS^liEMai^ny^A$:^ft--2>^S^IiE ; E^^--;b8 1 3. MM ^ V 8 3 

[0153] 

Ht-^/^^b^S^^o.-;!/ 8 2 o te, n>-r>y, "r-9<D%^ViM^.^^i 

^-rs^a&nfT-rssL^^rL-y h 8 2 3, Rt-JHtML m&t&m, m&m 

AfM^5:Hf!tSRSAf^^l-«/ h 8 2 5, R S ASi&fcSE&Hf? 
5RS A^i&^fiErL- y h 8 2 6. ECCfM^!t5ECCS«l 
-«yt> 8 2 7, E CCm£*kU*mft?Z>ECCm£feU=L— V h 8 2 8 

[0154] 

(D^mmummit, mttimi 1 - 1 3 £MVNTML£i§sEM <ca) 

Lfc^M«SEW»-e»»;»iEJS (CA) ©*i&*«lJK±^**l*^IW«tliEW»1? 

<fc ^> a 

[0 15 5] 

§EM (CA) Lfe=fo©T*feU^!iiE^ (CA) <Z>g£# 1 J^±^* 



4 1 
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[0 15 6] 
[0 15 7] 

^vmmftmm^z 1 2tc&, f;ux©» (id), ^n^xmm 
itmt LTmmtzmmm^tf&mzn. 2 ^i,z^mmumm<D^mzm^^m 

ie m t - # t is x <d ^ x v v v a & ^ m $ n s „ 

[0158] 

02 2tc^t-«};^jc, ^/i-r^{t, rsai^t;^';^, Eccf^r;i/ 
& e> ma 2 n z> 'Ammmm-tf ecc, rsa^ ? ti <Dm& tjv^v X2±iz'&^ 

[0159] 

r©j:-Mc, mmamzTK^v x&nvm mm ^m^^-fx (mm 
mmmm *mmirz>z.znz£v. m^<Dmmm^a^^mmumm&,^^ 
mcDm-m^a^^mmummiz^^x^, &nAj£(Dm&. ^u^m^mt. 

<D&U<n : b££i£iz$zft-B5miite2> a 
[0 1 6 0] 
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[0161] 

S A, E C C & fc^^fctfco &«ft(Z)*« U&^MaifliE9l*«: 

[0®<Z>ffi#&I&EE] 
[01] 

[0 2] 

[0 3] 

[04] 
[05] 

' ^WttSEWS^^-^fll^^jWSrSiWrSH (*©1) T*&£ 0 
[0 6] ■ 

[0 7] 
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[08] 

[09] 

r s Am^mmic^M^m(D^m^m zmw-t z y u -0t*&&„ 
imi o] 

[mi 2] 

'Ammuwm<DM&c.&£tfm&mmm (^©2) *m-tmr'&z> 0 

[013] 

mi 4] 
[mi 5] 

[Ell 6] 

^MiiE^»©^^iEra^ffi$:^0^-tS7n-SI (Ml-1) 
[01 7] 

^mmummoym^mmm^m^mmt^yn-m (Mi -2) t*&3„ 

[018] 

&fflmuwm<Dm%&mmm^imzm,w-tz>yu-m (12-1) -e&s. 

[Ell 9] 

^^illiE0^*<Z)^^|iE^S#jlK$:l»0^^-5 7n-EI (M2-2) T'fe5„ 
[EI2 0] 

M^^^^$E^a^^^t-^^/WxraT©ffiS^iiEra§:^0^t--5EIT^ 

So 

[EI 2 1] 
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[02 2] 

M & -5 T A> df U X A IC J: S #«ME rT IB & A >f ;* * j& £ m "t -f a y * 0T* & 

So 

[023] 

2 1 E C CfgHiEM 

2 2 ECCltM 

2 3 ECCrAMX 

3 1 R S AiSifiE^ii 

3 3 RSAfAM^ 

4 1 RSAfAMX 
4 2 ECCf^MX 
4 3 R S AfgfEM 

4 4 

4 5 RSA&ECCtiM 

. 6 1,71,81 m*mm 
6 2, 72, 82 &mmm 
6 3, 73, 8 3 m&am 

6 4, 7 4, 8 4 *«flr*HRtt 

7 5, 8 5 12 ^ifefl^C 
7 6,8 6 7 9 

7 7,8 7 »«fl|ff 
5 0 1 R SAf/UT, 
5 0 2 ECCf/HT, 
5 0 3 R S ASSIES 
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5] 



e^7*-j * hm (x.509 V3irmm 

: : Vt« t«*» 1. W „»« * < 






versiom 




version 




V3 


serial Number 


BBS CD Serial No. 




si gn a lure . ai gori t nm 
Identifier 

algorithm 

parameters 


mmm&mZi ?)vzs y x 


^P3ffli^Bt^/RSA 


issuer 


IA % (Distinguished 
Nameff^iO 




validity 
notBefore 
notAfler 






subject 


usergj^gij^-s^ffj 


**tt<7)ID 


subject Public Key Info 
algorithm 
subject Public key 


user©^P|gi^^ 
StGDTVUf iJXA 
ft 


^PJEfti^SA 


Version3 


authority Key Identifier 
key Identifier 
authority Cert Issuer 
authority Cert Serial 

Number 


IA <Z>W£fitigffl©§tl$#J 
I A ^(General Nam^f?^) 




subject key Identifier 






key usage 

(0) digital Signature 

(1) non Repudiation 

(2) key Encipherment 

(3) data Encipherment 

(4) key Agreement 

(5) key CertSign 

(6) cRL Sign 




0, 1,4,6 ftjpjffl 


private Key Usage Period 
notBefore 
notAfter 


user {Ztefc^ttT^-Slfc 


WEB (default* 
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[06] 



policy Mappings 
issuer Domain Policy 
subject Domain Policy 


CA Mffi-r 


default = & b 


supported Algorithms 
algorithm Identifier 
intended Usage 
intended Certificate 

Policies 


r^l/^hU (X.500) © 


default = j£ 


subject Alt Name 






issuer Alt Name 


m B itXixX 43 < (default 
= fclJ 


default = 


subject Directory 
Attributes 






basic Constraints 
cA 

path Len Constraint 


l©I€ffl^ user ©fc 


default = user^g 


uaiuc v/ULioti alii to 

permitted Subtrees 
base 

minimum 
maximum 
excluded Subtrees 


-Vtf* ST/ s-ti" -te. 3"« rrt — •»*- -y 

ffi^ fCA MfrF^ t^rn^/^j 


aeiauit ~ ?g; u 


policy Constraints 
requireExplicitPolicy 
inhibitPolicyMapping 


mm*mmx y s>- id. 




CRL Distribution Points 


user #IEBJ3#£*iJffl-r£ 
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